Infisical is security infrastructure that keeps application credentials, certificates, and production access under control, with an open-source core and a managed cloud.

Secrets management - Applications, CI jobs, and agents fetch credentials at runtime through a CLI, SDKs, a Kubernetes operator, or an API.
Agent Vault - Lets AI agents call third-party APIs with credentials attached at the network boundary, so the agent never holds the key.
Certificate management - Runs private certificate authorities and renews certificates automatically before expiry.
Privileged access - Gives engineers time-bound, recorded sessions on databases and servers instead of standing access.
Syncs and rotation - Pushes secrets to platforms such as GitHub, Vercel, and AWS, rotates database and cloud credentials, and mints short-lived dynamic secrets.

It is used by platform and DevOps engineers, small teams without dedicated security staff, and AI platform teams whose agents act on real systems.

The open-source core is free to self-host. Cloud plans include a free tier, a 30-day trial for secrets management, and a 14-day trial for privileged access.